Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2020:3729-1 Important: ClamAV DoS Condition Update

suse
Calendar Grey December 9, 2020
Dist Suse Esm H88
A significant release for clamav is here, tackling 8 vulnerabilities and showcasing a substantial boost in performance.
An update that solves 8 vulnerabilities, contains one feature and has one errata is now available

Summary

This update for clamav fixes the following issues: clamav was updated to 0.103.0 to implement jsc#ECO-3010 and bsc#1118459. * clamd can now reload the signature database without blocking scanning. This multi-threaded database reload improvement was made possible thanks to a community effort. - Non-blocking database reloads are now the default behavior. Some systems that are more constrained on RAM may need to disable non-blocking reloads as it will temporarily consume two times as much memory. We added a new clamd config option ConcurrentDatabaseReload, which may be set to no. * Fix clamav-milter.service (requires clamd.service to run) * Fix freshclam crash in FIPS mode. (bsc#1119353) Update to version 0.102.4: Accumulated security fixes: * CVE-2020-3350: Fix a vulnerability wherein a malicious user could

Topics%20covered

Topics Covered

security advisory update DoS vulnerability patch important SUSE clamav important update

References

#1118459 #1119353 #1144504 #1149458 #1151839

#1157763 #1171981 #1174250 #1174255 ECO-3010

Cross- CVE-2019-12625 CVE-2019-12900 CVE-2019-15961

CVE-2020-3123 CVE-2020-3327 CVE-2020-3341

CVE-2020-3350 CVE-2020-3481

Affected Products:

SUSE Linux Enterprise Server 12-SP5

https://www.suse.com/security/cve/CVE-2019-12625.html

https://www.suse.com/security/cve/CVE-2019-12900.html

https://www.suse.com/security/cve/CVE-2019-15961.html

https://www.suse.com/security/cve/CVE-2020-3123.html

https://www.suse.com/security/cve/CVE-2020-3327.html

https://www.suse.com/security/cve/CVE-2020-3341.html

https://www.suse.com/security/cve/CVE-2020-3350.html

https://www.suse.com/security/cve/CVE-2020-3481.html

https://bugzilla.suse.com/1118459

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:3729-1
Rating: important

Topics%20covered

Topics Covered

security advisory update DoS vulnerability patch important SUSE clamav important update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here